From owner-freebsd-hackers Mon Jun 29 22:39:59 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id WAA04662 for freebsd-hackers-outgoing; Mon, 29 Jun 1998 22:39:59 -0700 (PDT) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from super-g.inch.com (super-g.com [207.240.140.161]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id WAA04657 for ; Mon, 29 Jun 1998 22:39:57 -0700 (PDT) (envelope-from spork@super-g.com) Received: from localhost (localhost [127.0.0.1]) by super-g.inch.com (8.8.8/8.8.5) with SMTP id BAA01896; Tue, 30 Jun 1998 01:39:51 -0400 (EDT) Date: Tue, 30 Jun 1998 01:39:51 -0400 (EDT) From: spork X-Sender: spork@super-g.inch.com To: Leo Papandreou cc: hackers@FreeBSD.ORG Subject: Re: Too much spam from uu.net In-Reply-To: <19980630002547.30271@supersex.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG How hard is it to allow uu.net mail relays, but no direct connections from dialups, ie: foo.tnt.foo.uu.net is blocked but smtp.uu.net is not? I'm looking to do something like this here, but haven't revisited sendmail in some time. There's no reason for a dialup connection to send me (or anyone else) mail directly. They should be sending via their ISP's relay instead. Charles Charles Sprickman spork@super-g.com ---- On Tue, 30 Jun 1998, Leo Papandreou wrote: > On Mon, Jun 29, 1998 at 06:11:25PM -0700, Jordan K. Hubbard wrote: > > > It's very unlikely that the spam originates from anyone with a mailbox on > > > a UU.NET system. You're probably seeing it from addresses which are in the > > > foo.DA.UU.NET or bar.MS.UU.NET which are PPP pool addresses used by resellers > > > of the dial network infrastructure. These would include MSN, AOL, Earthlink, > > > the Well, WebTV and many others. > > > > 99% of which are vulnerable to a teardrop attack. Instant SPAM > cancel. > > > Right, and I think I made this point in my original email. Since > > they're clearly reselling to a lot of folks with no scruples WRT UCE > > at all, the easiest thing to do is simply block *.uu.net since I > > I personally think you are cutting off too many people by blocking > uu.net. Uu.net is a *lot* of dialups I'm doubt uu.net has any con- > trol over spammers who open an account with MSN, connect and funnel > their spam to earthlink or some place in hungary. Spamming software > has gotten pretty good at what it does. > > > > > certainly don't want the job of having to track down every foo.uu.net > > subdomain resold to a spammer-friendly ISP. As Jon has also already > > noted, the folks directly affected by this seem quite small and I've > > gotten *far* less spam in my mailbox today as a result, so as far as > > I'm concerned the exercise is an unqualified success. > > > > > If you tried to report this to abuse@uu.net and that didn't yield > > > satisfactory results, please let me know. While "god ... knows > > > which .. is repsonsible > > > > Heh. I reported it so many times and so frequently that Paul Vixie > > finally asked me to cc him on all the reports, someting which I did > > for a couple of months until we both got tired of the exercise. > > > > - Jordan > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-hackers" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-hackers" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message